CVE-2017-6432 - CVE House
Back to Database
Status published High CVE-2017-6432

An issue was discovered on Dahua DHI-HCVR7216A-S3 3.210.0001.10 build 2016-06-06...

Vulnerability Description

An issue was discovered on Dahua DHI-HCVR7216A-S3 3.210.0001.10 build 2016-06-06 devices. The Dahua DVR Protocol, which operates on TCP Port 37777, is an unencrypted, binary protocol. Performing a Man-in-the-Middle attack allows both sniffing and injections of packets, which allows creation of fully privileged new users, in addition to capture of sensitive information.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-6432

Credits & Attribution

No credits recorded in the NVD database.

References

More from dahuasecurity

View All →
CVE-2017-7253
Dahua IP Camera devices 3.200.0001.6 can be exploited via these...
High 8.8
CVE-2017-6343
The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware...
High 8.1
CVE-2017-6342
An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR...
Critical 9.8
CVE-2017-6341
Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware...
Medium 5.9
CVE-2013-6117
Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass...
High 7.5

Affected Vendor

dahuasecurity

View all reports →

Affected Software

nvr firmware
Vulnerable Versions:
3.210.0001.10

Timeline

Official Publish: March 9th, 2017
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.